Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Ive been getting a reacurring process labeld as lexplore in my processes it keeps opening internet explorer and trying to load web pages i also have a securety warning popping up ocasionally please help me at least fix the lexplore here is my data

Spybot S&D's tea timer normally provides real-time protection from spyware, however it may interfere with what we need to do. We will disable it until the machine is clean when it can be re-enabled.

First step:

Right-click the Spybot Icon in the System Tray (looks like a blue/white calendar with a padlock symbol)

If you have the new version 1.5, Click once on Resident Protection, then Right click the Spybot icon again and make sure Resident Protection is now Unchecked. The Spybot icon in the System tray should now be now colorless.

Don't forget to re-enable it, after i tell you that your computer is clean.

Do you have any AntiVirus Software installed? Looking over your log it seems that you don't.

Anti-virus software is a program that detects; cleans and erases harmful virus files on a Computer; Web server or Network. Unchecked, virus files can unintentionally be forwarded to others and thereby spread infection. Because new viruses regularly emerge, anti-virus software should be updated frequently. Anti-virus software scans the computer memory and disk drives for malicious code. They alert the user if a virus is present and will clean; delete (or quarantine) infected files or directories.

If you have none installed Please download a free anti-virus software from one these excellent vendors NOW:1)Antivir PersonalEdition Classic- Free anti-virus software for Windows. Detects and removes more than 50,000 viruses. Free support.2) avast! 4.8 Home Edition - Anti-virus program for Windows. The home edition is freeware for noncommercial users.3)AVG Anti-Virus Free Edition - Free edition of the AVG anti-virus program for Windows.

It is strongly recommended that you run only one antivirus program at a time. Having more than one antivirus program active in memory uses additional resources and can result in program conflicts and false virus alerts. If you choose to install more than one antivirus program on your computer then only one of them should be active in memory at a time.

Once you have downloaded one of the above please update it and run a full scan.

NEXT Open Hijack This and select Do a System Scan Only place a check next to the below lines if still present

when i downloaded the virus scanner, it went crazy trying to close and delete a program called virtumonde or something like that made about 93 logs in the quarentine folder before i just ignored it. its been picked up by spybot as well and everytime it deletes that i brings up a couple doss windows but anyway here is the new logthanks for the help so far, from the looks of the virus scan my computer is really messed up.

Computer Name: CONN.COMEvent Code: 1006Message: Your computer was unable to automatically configure the IP parameters forthe Network Card with the network address 001B2FCB6FC6. The following error occurredduring configuration: The DHCP client has obtained an IP address that is already in use on the network. The local interface will be disabled until the DHCP client can obtain a new address..

Computer Name: CONN.COMEvent Code: 7001Message: The Infrared Monitor service depends on the Terminal Services service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

Computer Name: CONN.COMEvent Code: 7001Message: The Infrared Monitor service depends on the Terminal Services service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

Computer Name: CONN.COMEvent Code: 7001Message: The Infrared Monitor service depends on the Terminal Services service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

Computer Name: CONN.COMEvent Code: 16Message: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

Please go to Virus Total <http://www.virustotal.com/> or Jottiand upload c:\windows\help\servicse.exe for scanning.For Virus Total1. Please copy and paste c:\windows\help\servicse.exe in the text box next to the Browse button. 2. Click on Send File.For Jotti1. Please copy and paste c:\windows\help\servicse.exe in the text box next to the Browse button. 2. Click on Submit.

Please post back the results of the scan in your next post.

NEXT I would like you to run RSIT again and reply with both logs along with the Jotti results please.

Computer Name: CONN.COMEvent Code: 1006Message: Your computer was unable to automatically configure the IP parameters forthe Network Card with the network address 001B2FCB6FC6. The following error occurredduring configuration: The DHCP client has obtained an IP address that is already in use on the network. The local interface will be disabled until the DHCP client can obtain a new address..

Computer Name: CONN.COMEvent Code: 7001Message: The Infrared Monitor service depends on the Terminal Services service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

Computer Name: CONN.COMEvent Code: 7001Message: The Infrared Monitor service depends on the Terminal Services service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

Computer Name: CONN.COMEvent Code: 7001Message: The Infrared Monitor service depends on the Terminal Services service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

Computer Name: CONN.COMEvent Code: 16Message: Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.

Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".

My computer is defenatly doing better i have long intro music on my log in it got to the point where the music would end and i still didnt see my desk top now its loading the desk top like it used to also with my sound scheme i can tell when any program opens and closes i think virtumonde is still tring to load itself on my computer but is being blocked by avira which concerns me but not as much troublesome. you have done more then i expected in helping clean my computer thank you for your time and hard work. i really appriciate all you have done for me so far.

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.